[strongSwan] OCSP nonce parameter

Modster, Anthony Anthony.Modster at Teledyne.com
Fri Nov 8 18:50:24 CET 2019


? is there a possibility of a patch to allow checking the received nonce

-----Original Message-----
From: Tobias Brunner <tobias at strongswan.org> 
Sent: Thursday, November 07, 2019 11:27 PM
To: Modster, Anthony <Anthony.Modster at Teledyne.com>; users at lists.strongswan.org
Subject: Re: [strongSwan] OCSP nonce parameter

---External Email---

Hi Anthony,

> When using OCSP, ? is the nonce parameter always set.

Yes, the x509 plugin always adds a random nonce.  It doesn't seem to be used/checked later, though.

Regards,
Tobias


More information about the Users mailing list